This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aed398b9-848a-379a-8cf6-f0654ee83612.roa
File:                     aed398b9-848a-379a-8cf6-f0654ee83612.roa (raw, json)
Hash identifier:          979SajrR/53VnOiegpP1Vf8cLOTW3+ItQf48IhWyyy8=
Subject key identifier:   74:77:15:9F:77:CC:C9:A3:CF:C4:84:4F:06:5D:14:1A:F4:5B:BF:6F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB3862582E15F871FB72AF900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aed398b9-848a-379a-8cf6-f0654ee83612.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     401152
IP address blocks:        50.114.113.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:25:82:e1:5f:87:1f:b7:2a:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=d926e036-9ff0-453c-9012-eac4e8851a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:9c:aa:3e:72:1c:1f:1d:5d:7b:cf:5c:43:
                    32:24:29:9a:43:17:f8:23:ed:c3:d0:a5:82:e0:2e:
                    b2:f6:b1:99:3f:b4:0a:fe:c8:c4:c2:0f:8c:5f:bf:
                    b6:79:59:89:dd:c6:75:e0:8e:bd:1a:a1:80:b6:d7:
                    00:8b:b5:6b:0e:d1:3f:f4:11:3e:19:b9:97:d9:c4:
                    8a:59:58:30:c0:44:dc:90:7a:91:79:35:f2:ea:a0:
                    67:42:58:16:a0:a5:fc:8d:ab:f2:51:f7:b3:83:41:
                    12:1b:3b:fb:55:cf:bf:d2:88:21:9f:b0:39:6e:0c:
                    12:26:2d:77:48:50:e8:63:17:7e:39:2d:a4:80:9d:
                    f5:04:7b:9e:ce:17:8e:f8:ce:e8:d4:ec:d8:1f:5c:
                    f1:7a:ea:6d:6a:36:8d:6f:18:d2:e1:cc:97:a2:73:
                    7d:36:7b:99:91:d6:d3:a3:56:b4:24:ce:3d:c8:f3:
                    81:35:47:cc:4f:da:09:69:0d:96:42:13:46:75:b5:
                    c3:34:96:d1:fb:e9:2c:b6:df:96:07:0a:20:e0:8b:
                    01:17:75:ca:27:2d:89:fa:50:90:14:99:93:a2:52:
                    5a:ff:72:07:ec:fc:b8:e5:50:0a:d4:21:79:2b:74:
                    cd:16:76:a8:60:75:55:6c:f9:a5:07:1a:53:41:ff:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:15:9F:77:CC:C9:A3:CF:C4:84:4F:06:5D:14:1A:F4:5B:BF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aed398b9-848a-379a-8cf6-f0654ee83612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:cd:3d:f6:06:ff:27:98:9e:f4:e0:d5:90:46:8f:a7:06:54:
         79:74:26:ec:c6:72:d2:eb:f0:77:36:0d:d2:bd:06:03:23:59:
         e2:25:39:40:ea:df:53:e0:17:0c:91:91:ed:b4:e4:d9:8a:3e:
         91:88:12:c5:bb:f2:4a:87:0f:9e:16:17:c7:38:aa:a5:77:43:
         c5:31:ff:32:0c:13:3f:9a:83:6a:a8:f2:06:01:41:3f:f4:15:
         d9:b0:46:68:2c:63:2f:c0:5c:35:85:6b:e2:85:30:74:56:96:
         7d:8f:ef:58:9d:1b:49:f8:b9:3f:a3:32:45:3c:3a:70:5e:2d:
         6e:08:59:6a:16:23:2a:00:d8:18:86:a1:eb:d1:c9:3e:09:a9:
         f8:65:8d:c8:ab:7d:54:b7:db:8c:9e:27:e8:20:ea:d8:54:a6:
         51:58:57:2b:42:76:34:eb:69:3c:2e:42:1d:1d:de:14:b5:ab:
         27:88:be:50:39:df:fd:eb:13:17:d6:8e:cd:52:f2:2e:0a:15:
         7d:93:45:84:7f:1b:3c:cd:ab:50:cc:c6:e7:71:6d:90:19:e9:
         d9:e6:55:26:47:5a:ff:02:84:0c:60:93:6e:77:cd:5b:82:f7:
         04:82:f1:d1:ab:fc:8d:43:d2:2b:7a:b5:d4:6e:4a:42:73:97:
         19:a8:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----